This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DaL6DrQU6YvEd9tbw2QEDernfSo.roa File: DaL6DrQU6YvEd9tbw2QEDernfSo.roa (raw, json) Hash identifier: PDFvGFyMPEFwoJ82KdbJF1LFRTBdlPDreWAzq7vqBvw= Subject key identifier: 0D:A2:FA:0E:B4:14:E9:8B:C4:77:DB:5B:C3:64:04:0D:EA:E7:7D:2A Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA29EB89DC1D286189DB0D11224465 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DaL6DrQU6YvEd9tbw2QEDernfSo.roa Signing time: Fri 02 Jan 2026 08:19:19 +0000 ROA not before: Fri 02 Jan 2026 08:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 194.53.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:29:eb:89:dc:1d:28:61:89:db:0d:11:22:44:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da2fa0eb414e98bc477db5bc364040deae77d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2e:16:3f:a8:70:d5:ef:92:a1:2b:df:8e:04: 11:fa:96:56:bc:14:b7:11:1c:4b:f0:56:66:9c:44: a6:f6:9e:29:96:80:d4:38:d5:0d:a1:97:8e:f8:5f: 14:3e:41:c0:ce:6a:fe:e0:6d:a8:ad:93:80:f4:19: ac:b9:11:40:c4:bc:9d:7e:6e:06:d2:46:e9:7c:10: 7c:5b:b8:f0:9a:63:bd:3a:37:65:60:99:25:f7:fa: c7:22:44:12:d6:e3:d3:0a:ae:a2:93:6f:c7:47:93: 8f:fc:70:75:8f:61:03:03:ee:76:d2:e1:ae:b6:1e: 2c:f1:da:af:5a:23:02:af:7d:ec:14:fb:2b:08:93: 06:ae:7c:59:97:8b:70:8b:54:0e:4e:b9:b0:58:41: 8f:25:43:8b:e0:c9:a5:4d:23:02:65:5a:32:4a:2a: c3:fe:98:03:d9:19:b1:bd:db:9e:5c:ff:ee:34:e8: e0:ef:15:60:ea:7a:8d:28:f7:37:3e:b2:7a:93:6d: ee:26:83:2f:62:1f:77:27:4f:00:f9:24:6b:09:e3: aa:c1:4d:c8:f2:0d:a9:76:e1:36:d9:59:b2:93:a8: c3:91:c0:5a:e1:a2:a1:c1:96:80:5b:50:d4:14:cf: 08:a5:df:57:80:32:e9:2c:dd:91:f4:9b:29:70:45: b8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A2:FA:0E:B4:14:E9:8B:C4:77:DB:5B:C3:64:04:0D:EA:E7:7D:2A X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/DaL6DrQU6YvEd9tbw2QEDernfSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.53.188.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:3f:d5:8a:1f:bc:0d:3b:c2:00:29:75:37:87:ab:80:ca:9a: 05:be:41:fc:a2:16:9b:02:c2:91:88:16:bb:5d:1f:a5:8a:6d: 47:6b:81:a6:85:29:36:85:4b:21:5d:e8:22:e1:ee:ef:7b:85: 22:47:e5:4f:fc:09:7b:17:d2:c3:1f:29:0a:20:8a:bb:a9:0d: d1:21:a9:72:f0:b1:dc:be:5e:c6:94:74:92:90:55:9e:7a:c8: 40:2d:be:ad:3a:2b:00:5c:94:b1:ad:30:6a:14:22:cf:2d:f2: 89:27:0b:93:9e:18:02:b4:92:0a:ce:77:52:df:13:a2:b3:0a: 3a:22:29:af:ca:15:94:9c:58:67:a8:0c:65:b8:17:64:c5:e2: d1:49:c0:fd:d5:e3:b8:66:94:cb:0c:16:c9:8a:07:0d:96:c2: fd:ef:1b:3f:10:de:58:7e:2d:9a:17:57:ef:29:ea:79:2c:90: 11:d3:e4:b7:5d:8e:19:1e:a5:61:1d:7a:ae:2d:2e:34:71:c9: 08:ca:e3:8b:55:00:fd:78:c1:87:73:ad:54:d8:6c:2a:bc:8c: fc:f9:53:cf:cf:72:20:64:d6:18:fb:83:96:78:c4:4c:2f:05: ff:3e:97:4a:4f:75:82:93:86:e4:47:86:42:0b:3d:6a:fd:26: df:8d:97:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yinridwdKGGJ2w0RIkRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGEyZmEwZWI0MTRlOThiYzQ3N2RiNWJjMzY0MDQwZGVhZTc3ZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC4WP6hw1e+SoSvfjgQR+pZWvBS3 ERxL8FZmnESm9p4ploDUONUNoZeO+F8UPkHAzmr+4G2orZOA9BmsuRFAxLydfm4G 0kbpfBB8W7jwmmO9OjdlYJkl9/rHIkQS1uPTCq6ik2/HR5OP/HB1j2EDA+520uGu th4s8dqvWiMCr33sFPsrCJMGrnxZl4twi1QOTrmwWEGPJUOL4MmlTSMCZVoySirD /pgD2RmxvdueXP/uNOjg7xVg6nqNKPc3PrJ6k23uJoMvYh93J08A+SRrCeOqwU3I 8g2pduE22Vmyk6jDkcBa4aKhwZaAW1DUFM8Ipd9XgDLpLN2R9JspcEW4RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2i+g60FOmLxHfbW8NkBA3q530qMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvRGFMNkRyUVU2WXZFZDl0YncyUUVEZXJuZlNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjW8MA0G CSqGSIb3DQEBCwUAA4IBAQAcP9WKH7wNO8IAKXU3h6uAypoFvkH8ohabAsKRiBa7 XR+lim1Ha4GmhSk2hUshXegi4e7ve4UiR+VP/Al7F9LDHykKIIq7qQ3RIaly8LHc vl7GlHSSkFWeeshALb6tOisAXJSxrTBqFCLPLfKJJwuTnhgCtJIKzndS3xOiswo6 IimvyhWUnFhnqAxluBdkxeLRScD91eO4ZpTLDBbJigcNlsL97xs/EN5Yfi2aF1fv Kep5LJAR0+S3XY4ZHqVhHXquLS40cckIyuOLVQD9eMGHc61U2GwqvIz8+VPPz3Ig ZNYY+4OWeMRMLwX/PpdKT3WCk4bkR4ZCCz1q/SbfjZds -----END CERTIFICATE-----Generated at Mon Jan 19 21:24:32 2026 by rpki-client